184 matches found
CVE-2021-27928-POC
CVE-2021-27928 POC Descripción Se descubrió un problema de ejecución remota de código en MariaDB 10.2 anterior a 10.2.37, 10.3 anterior a 10.3.28, 10.4 anterior a 10.4.18 y 10.5 anterior a 10.5.9; Percona Server hasta 2021-03-03; y el parche wsrep hasta 2021-03-03 para MySQL. Una ruta de búsqueda...
CVE-2021-27928
信息 漏洞标题:MariaDB 10.2 /MySQL - 'wsrepprovider' 操作系统命令执行 日期:2021年3月18日 漏洞作者:Central InfoSec 受影响版本: MariaDB 10.2 版本低于 10.2.37 10.3 版本低于 10.3.28 10.4 版本低于 10.4.18 10.5 版本低于 10.5.9 Percona Server 截至 2021-03-03;以及用于 MySQL 的 wsrep 补丁截至 2021-03-03 测试环境:Linux CVE 编号:CVE-2021-27928 如何利用 步骤1:创建反弹Shell载荷...
GO-2026-4399 vulnerabilities
Vulnerabilities for packages: mariadb-operator, cert-manager-csi-driver, cert-manager-webhook-pdns, opentelemetry-operator, aws-privateca-issuer, cert-manager-istio-csr, percona-server-mongodb-operator, cert-manager-cmctl, step-issuer...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: knative-eventing, neuvector-scanner, osv-scanner, omnibump, pulumi-language-java, spark-operator, actions-runner-controller, crossplane-provider-aws-sns, tigera-operator, vault-benchmark, docker-credential-acr-env, container-object-storage-interface,...
GO-2026-4946 vulnerabilities
Vulnerabilities for packages: keda, neuvector-scanner, contour, pulumi-language-java, go-discover, terraform-mcp-server, terraform-provider-aws, kbld, terraform-provider-random, victoriametrics, cue, custom-pod-autoscaler-operator, step-issuer, cadvisor, memcached-exporter,...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: sbomqs, metacontroller, osv-scanner, vault-benchmark, actions-runner-controller, crossplane-provider-aws-sns, container-object-storage-interface, crossplane-provider-aws-cloudfront, stakater-reloader, calico, terraform-mcp-server, authservice, octo-sts, croc,...
CLEANSTART-2026-SP46945 Security fixes in percona-server-mongodb-operator 1.23.0-r0
Package percona-server-mongodb-operator version 1.23.0-r0 fixes 22 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...
CLEANSTART-2026-CN16573 Security fixes in percona-server-mongodb-operator 1.22.0-r1
Package percona-server-mongodb-operator version 1.22.0-r1 fixes 32 vulnerabilities: CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831...
CVE-2026-61828 nixos/mysql : `services.mysql` is configured with insecure authentication by default when used with `mysql` or `percona-server`
Nixpkgs is a collection of software packages that can be installed with the Nix package manager. Prior to the 25.11 and 26.05 channel fixes, the NixOS module for MySQL services.mysql initializes the MySQL database in a way that allows local users, such as unprivileged web or CGI processes on the...
CVE-2026-61828 nixos/mysql : `services.mysql` is configured with insecure authentication by default when used with `mysql` or `percona-server`
Nixpkgs is a collection of software packages that can be installed with the Nix package manager. Prior to the 25.11 and 26.05 channel fixes, the NixOS module for MySQL services.mysql initializes the MySQL database in a way that allows local users, such as unprivileged web or CGI processes on the...
CVE-2026-61828: Incorrect Default Permissions
Nixpkgs is a collection of software packages that can be installed with the Nix package manager. Prior to the 25.11 and 26.05 channel fixes, the NixOS module for MySQL services.mysql initializes the MySQL database in a way that allows local users, such as unprivileged web or CGI processes on the...
CLEANSTART-2026-BE68531 Security fixes for CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-32952, CVE-2026-33814, CVE-2026-35469, CVE-2026-39821, CVE-2026-39824, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-pc3f-x583-g7j2, ghsa-pjcq-xvwq-hhpj applied in versions: 1.22.0-r1
Multiple security vulnerabilities affect the percona-server-mongodb-operator package. These issues are resolved in later releases. See references for individual vulnerability details...
PT-2026-63666
Multiple security vulnerabilities affect the percona-server-mongodb-operator package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-KJ85611 Security fixes for CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-32952, CVE-2026-33814, CVE-2026-35469, CVE-2026-39821, CVE-2026-39824, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-pc3f-x583-g7j2, ghsa-pjcq-xvwq-hhpj applied in versions: 1.22.0-r1
Multiple security vulnerabilities affect the percona-server-mongodb-operator package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2026-25518 vulnerabilities
Vulnerabilities for packages: percona-xtradb-cluster-operator, cert-manager-istio-csr, step-issuer-fips, cert-manager-google-cas-issuer-fips, cert-manager-openshift-routes-fips, cert-manager-cmctl, mariadb-operator-fips, gitlab-operator, aws-privateca-issuer, cert-manager-csi-driver,...
GHSA-GX3X-VQ4P-MHHV vulnerabilities
Vulnerabilities for packages: mariadb-operator, cert-manager-csi-driver, cert-manager-webhook-pdns, opentelemetry-operator, aws-privateca-issuer, cert-manager-istio-csr, percona-server-mongodb-operator, cert-manager-cmctl, step-issuer...
CVE-2019-12301
The Percona Server 5.6.44-85.0-1 packages for Debian and Ubuntu suffered an issue where the server would reset the root password to a blank value upon an upgrade. This was fixed in 5.6.44-85.0-2...
GHSA-2Q7X-W5Q3-RJXC vulnerabilities
Vulnerabilities for packages: percona-server...